[Haskell-cafe] Re: Haddock

Jonathan Cast jonathanccast at fastmail.fm
Fri Feb 6 10:35:06 EST 2009

On Fri, 2009-02-06 at 09:40 +0100, David Waern wrote:
> 2009/2/6 Max Rabkin <max.rabkin at gmail.com>:
> > On Thu, Feb 5, 2009 at 4:25 PM, David Waern <david.waern at gmail.com> wrote:
> >> As for running arbitrary commands, I think we are opening up to a lot
> >> of unfamiliar syntax. I'd like to hear what everyone thinks about
> >> that.
> >
> > I personally find it useful to have Haddock comments readable in the source.
> >
> > And aren't there security issues, too? So we'd have to have an option
> > to disable them, which would have to be on by default, and basically
> > they would be disabled by everybody but the writers of the comments
> > themselves.

> I think you can invoke any command using Setup.hs and Cabal already.

It's not a question of what's possible.  It's a question of how hard it
is to audit your code.  Do I just have to read your build system
(Setup.hs and its import tree, and maybe the Cabal file)?  Or do I have
to scan the source code for dubious constructs (unfortunately, we
already have this issue with Template Haskell)?  Most programs have
source code that is much larger than their build systems.


More information about the Haskell-Cafe mailing list